CVE-2022-22516
CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V3.5.18.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.
Timeline
- CVE published
- Record last updated
Affected versions
- CODESYS CODESYS Control RTE (SL)
From V3.5.18.0 · fixed in V3.5.18.0
- CODESYS CODESYS Control RTE (for Beckhoff CX) SL
From V3.5.18.0 · fixed in V3.5.18.0
- CODESYS CODESYS Control Win (SL)
From V3.5.18.0 · fixed in V3.5.18.0
- CODESYS CODESYS Development System V3
From V3.5.18.0 · fixed in V3.5.18.0